All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
For security operations teams, Rapid7 sells software that scores vulnerabilities by risk to prioritize fixes and a SIEM that searches security records for attacks. In its Rapid7 MDR service, Rapid7 analysts investigate and contain threats for customers. Founded in 2000 and public since 2015, it reports more than 11,500 customers and $860 million of 2025 revenue. It earned a profit in the second quarter of 2026 while revenue fell 1.5% and annual recurring revenue fell 2% to $824 million. BankInfoSecurity reports Rapid7 struggling to keep pace with vulnerability management rivals. Two months after naming a new chief executive in June 2026, Rapid7 announced a 12% layoff. A customer leaving Rapid7 MDR would have to rebuild the monitoring Rapid7’s analysts perform.
| Description | Rapid7 runs a managed cybersecurity operations business on its Command Platform, unifying exposure management, vulnerability management, SIEM, and managed detection and response for more than 11,500 customers. | [f1] |
|---|---|---|
| Founded | 2000 | [f1] |
| HQ | Boston, Massachusetts, USA | [f2] |
| Latest funding | IPO July 2015 (NASDAQ: RPD) | [f3] |
| Product | What it does |
|---|---|
| Rapid7 Command Platform | The Command Platform integrates security data and enriches it with AI and threat intelligence to manage vulnerabilities, monitor for malicious behavior, investigate attacks, and automate operations. |
| Exposure Command | Exposure Command delivers attack surface visibility with proactive exposure mitigation and remediation prioritization across on-premises and cloud-native environments. |
| Surface Command | Surface Command builds a continuous 360-degree attack surface view from endpoint to cloud to detect and prioritize security issues. |
| Rapid7 MDR | Rapid7 MDR is a managed detection and response service that prevents attacks across the kill chain and responds to threats with unlimited incident response from an always-on managed XDR team. |
| InsightVM | InsightVM is the vulnerability management product that discovers, assesses, and prioritizes vulnerabilities across hybrid environments. |
| Metasploit | Metasploit is an open-source penetration testing framework Rapid7 stewards as a widely used security research community alongside Velociraptor. |
| Rapid7 Cyber GRC | Rapid7 Cyber GRC adds governance, risk, and compliance workflows to the Command Platform, tying control checks and audit evidence to live security data. |
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
The Rapid7 Command Platform inventories endpoints, correlates events across users, endpoints, applications, and network flows, and triggers isolation, credential revocation, and process kills. Rapid7 uses AI as the method to defend conventional assets and is mapped to the Cyber Defense Matrix. [f4]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 | Rapid7 names its buyer, the security operations team, and its problem, attackers exploiting disclosed flaws within days, on its own platform and SIEM pages. That urgency is Rapid7’s claim, and no independent source in the record quantifies the pain, so the problem statement is clear and credible without outside confirmation. [s8, s16] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 4/5 | Rapid7 documents its products in detail, down to monthly release notes such as the September 2026 change that brings CrowdStrike remediation data into Remediation Hub. Its Metasploit code is open to inspection under a BSD-style license, so part of Rapid7’s capability record can be checked outside its own product pages. [s19, s30, s6, s7] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | Rapid7 sells into established categories, and the record documents two signs of buyer-side demand, neither from an independent source. In its November 2025 release, Rapid7 relays Gartner’s 2025 Magic Quadrant for Exposure Assessment Platforms. Its chief executive describes customers asking about exposure management and detection and response. BankInfoSecurity and SiliconANGLE quote him in August 2026. With no second independently documented kind of buyer demand within the last year, the score is 3. [s13, s2, s27] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 3/5 | Wael Mohamed, whom BankInfoSecurity describes as a former Forescout chief executive, succeeded Corey Thomas on June 1, 2026, after Thomas led Rapid7 for more than 13 years, per SiliconANGLE. Rapid7 describes itself as steward of the Metasploit and Velociraptor communities. In the cited sources, Rapid7 alone describes that standing. Its leaders have verifiable senior experience without the independently documented product development or recognition a 4 needs. [s2, s27, s14, s7] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 5/5 | BankInfoSecurity reports Rapid7’s revenue in its own coverage, with 2025 sales of $859.8 million, up 1.9%, and first-half 2026 sales of $420.6 million, down 0.9%. That is substantial traction reported by a third party. Rapid7 also reports more than 11,500 customers, and it names Arcadis, AAA Northeast and Chemung Canal Trust Company under a trusted-by heading on its MDR page. Sales have slowed, so this score is for scale, not growth. [s2, s25, s9] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 4/5 | Rapid7 reported GAAP net income of $23.4 million for 2025 and $6.1 million for the second quarter of 2026, and SiliconANGLE reports $31.9 million of free cash flow in that quarter. Rapid7 earned that profit while guiding revenue lower, and the margin figures are the company’s own reporting, so output per dollar is confirmed while exceptional efficiency is not independently shown. [s25, s1, s27, s2] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 | BankInfoSecurity places Rapid7 without vendor coaching, calling it a vulnerability management vendor in 2024 and a managed cybersecurity operations vendor in 2026. Rapid7 itself announced its Leader placement in Gartner’s 2025 Magic Quadrant for Exposure Assessment Platforms and its inclusion in the 2025 SIEM Magic Quadrant, so its categories are clear while the leadership claim is vendor-announced. [s3, s2, s13, s16] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | Rapid7 MDR adds friction to absorption, because Rapid7 analysts investigate and remediate as an accountable extension of the customer’s team and the service ingests the customer’s telemetry through an extension library. The cited record documents that workflow embedding but no proprietary data flywheel or compliance position of the kind bundling alone would not replicate. [s9, s2] |
Rapid7 sells exposure management, vulnerability management, a SIEM, and managed detection and response to security operations teams. It reports more than 11,500 customers, and its platform page frames the problem as attackers exploiting disclosed flaws within days.
Rapid7 is focusing investment on detection and response and exposure management under its new chief executive, Wael Mohamed. In August 2026 he said customers want Rapid7 to go deeper in detection and response and exposure management rather than wider. In July 2026 Rapid7 also made Rapid7 Cyber GRC generally available, adding governance, risk, and compliance workflows to the Command Platform. [s7, s8, s1, s27, s20]
Rapid7 builds its products on the Command Platform. Exposure Command scores and prioritizes exposures with more than 500 integrations. In Incident Command, its SIEM, teams can trigger isolation, revoke credentials and terminate processes. In Rapid7 MDR, Rapid7 analysts work the customer’s alerts.
Rapid7 is adding AI to that stack. It acquired Kenzo Security, whose multiple specialized AI agents investigate alerts using combined security data, and it announced plans to embed Kenzo’s AI models across MDR operations. In October 2026 Rapid7 launched Rapid7 Intelligence, which combines threat intelligence, vulnerability research and Rapid7 Labs.
Rapid7 documents its products publicly, down to monthly release notes. It stewards the open-source Metasploit Framework, released under a BSD-style license, and Velociraptor. [s22, s16, s9, s12, s18, s19, s30, s6, s7]
Rapid7’s distinctive claim is breadth, selling exposure management, a SIEM and a managed detection service into one account. On its pricing page, Rapid7 presents InsightVM, InsightAppSec and InsightCloudSec as products customers can use individually or together.
BankInfoSecurity reports that Rapid7 has struggled to keep pace with vulnerability management rivals, with first-half 2026 sales down 0.9%. Its October 2024 coverage named Qualys and Tenable as competitors.
Rapid7 also works alongside other security platforms. It brings CrowdStrike remediation data into Remediation Hub and sells MDR for Microsoft to companies in Microsoft’s security ecosystem. [s15, s2, s3, s19, s25]
Rapid7 operates at scale with shrinking recurring revenue. It reported $860 million of revenue for 2025 and more than 11,500 customers, while second-quarter 2026 revenue fell 1.5% to $210.9 million and annual recurring revenue fell 2% to $824 million.
Rapid7’s annual recurring revenue per customer has also fallen. SiliconANGLE reports annual recurring revenue per customer of about $70,000, down from $72,000, and Rapid7 guided third-quarter revenue to $208 million to $210 million, a drop of 4% to 5%.
Rapid7 names customers on its own pages. It names Arcadis, AAA Northeast and Chemung Canal Trust Company under a trusted-by heading on its MDR page and Wyndham Hotels on its customers page. Its Cyber GRC launch named GetWell Networks and SelectQuote Insurance Services as early customers. [s25, s1, s27, s9, s26, s20]
Rapid7 changed chief executives mid-turnaround. Wael Mohamed, whom BankInfoSecurity describes as a former Forescout chief executive, took over on June 1, 2026 from Corey Thomas, who had led the company for more than 13 years and became executive chairman.
Mohamed moved quickly to cut costs. In August 2026 Rapid7 announced it would lay off 12% of its staff, its second large layoff after an 18% cut in August 2023. Rapid7 expects its non-GAAP operating margin to reach 20% in the fourth quarter of 2026.
In October 2024 BankInfoSecurity reported that the activist fund JANA Partners had taken a 13% economic interest and was evaluating buyer interest in Rapid7, before the 2026 leadership change. [s2, s27, s14, s3]
Rapid7’s security posture is broadly attested for enterprise and government buyers. Its information security management system is ISO 27001 certified through a third-party audit, it undergoes an annual SOC 2 Type II audit, and its AI management system is ISO/IEC 42001 certified.
Government-facing assessments extend that reach. Rapid7 has completed an IRAP assessment at PROTECTED level for several Insight Platform solutions. It completed a BSI C5:2020 Type 2 examination for the Command Platform and Threat Command. Its InsightGovCloud Platform has GovRAMP authorization for state, local, and educational buyers. Rapid7 can present these credentials in procurement reviews by regulated and public-sector buyers. [s10, s11]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| Tenable | competes with | BankInfoSecurity named Tenable as a Rapid7 competitor, and the two sell vulnerability and exposure management to the same security teams. | |
| Qualys | competes with | BankInfoSecurity named Qualys as a Rapid7 competitor in vulnerability management, the line where Rapid7 has struggled to keep pace. | N/AThese companies operate in different domains, so the scores reflect readiness in different markets. |
| CrowdStrike | competes with | Competes for the detection and response buyer Rapid7 now prioritizes, while Rapid7 also ingests CrowdStrike remediation data. | |
| Microsoft | adjacent | Adjacent platform vendor whose security ecosystem Rapid7 serves with MDR for Microsoft. | N/AMicrosoft is scored by product line, not as a whole company, so there is no company-wide column to compare. Open its profile to compare a specific product. |
Add analyzed competitors to compare them side by side with Rapid7.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
press the advantage
Rapid7 publishes starting prices for its scanning, application and cloud products. BankInfoSecurity reports Rapid7 struggling to keep pace with vulnerability management rivals. In Rapid7 MDR, Rapid7 analysts investigate and remediate as an extension of the customer’s team, so a departing customer must rebuild that monitoring in staff, tools and process. Rapid7 also holds patents, reporting its 300th grant in December 2025, and its threat research draws on MDR telemetry. Its new chief executive is concentrating the company on detection and response and exposure management, the lines that include that service.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 2/3 | Rapid7 publishes starting prices for its Insight software products. Its MDR analysts work as an accountable extension of the customer’s team. Its chief executive names detection and response as a core focus, so code and expertise blend across the business. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | Rapid7 MDR ingests a customer’s telemetry through Rapid7’s extension library, and Rapid7 analysts take over monitoring, so leaving means rebuilding that monitoring work, its integrations and its staffing. The cited record documents that mechanism but does not size the migration, and it documents no traffic dependence, hardware key custody or proprietary policy language. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 2/3 | Rapid7 has GovRAMP authorization for InsightGovCloud, an IRAP assessment at PROTECTED level and a BSI C5:2020 Type 2 examination. A government buyer that requires one of those would need an equally assessed replacement, which takes time and assessor or regulator review but remains feasible for other vendors. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | Incident Command offers behavioral analytics and AI search across billions of records. Rapid7 acquired Kenzo, whose specialized AI agents investigate alerts using combined security data. That is machine-learning and real-time detection work at scale. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | Rapid7 offers its GovRAMP-authorized InsightGovCloud Platform to state, local, and educational organizations. It has completed an IRAP assessment at PROTECTED level for several Insight Platform solutions. It names AAA Northeast and Chemung Canal Trust Company under a trusted-by heading on its MDR page. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 | The Command Platform ingests telemetry, correlates it and triggers response actions such as isolation and credential revocation, a platform with application features. The cited record documents no Rapid7 component that customer requests or workloads must pass through to proceed. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 2/3 | Rapid7 says it was granted its 300th cybersecurity patent in December 2025 and holds over 80 patents focused on AI and machine learning, an IP asset it retains that lifts the score above the floor. On its SIEM page Rapid7 also says its AI engine is built on 20 years of data. The cited sources do not specify that data’s origins or size. |
Rapid7 serves security operations teams across more than 11,500 customers, and it reaches government buyers through dedicated authorizations. Its InsightGovCloud Platform has GovRAMP authorization for state, local, and educational organizations, and it has completed an IRAP assessment at PROTECTED level for several Insight Platform solutions.
The segmentation that now matters is by product line. Rapid7’s chief executive says customers want the company to go deeper in detection and response and exposure management, and Rapid7 announced its August 2026 layoffs to better align resources with its core platform.
Rapid7’s AI work is concrete and partly acquired. Kenzo Security, which Rapid7 bought, runs multiple specialized AI agents using combined security data to investigate alerts, and Rapid7 announced plans to embed Kenzo’s AI models across MDR operations. Incident Command offers behavioral analytics and AI search across billions of records.
Rapid7 also reports patents and long-running data behind its products. It says it was granted its 300th cybersecurity patent in December 2025 and holds over 80 patents focused on AI and machine learning. On its SIEM page, Rapid7 says its AI engine is built on 20 years of data, and its threat research analyzes data from incident response and MDR telemetry.
Rapid7 keeps part of its research open. Under Rapid7 Intelligence, critical advisories and vulnerability research remain open, and Rapid7 stewards the open-source Metasploit Framework.
Rapid7 is restructuring around its core platform. In August 2026 Rapid7 notified about 12% of its workforce that their positions would be affected, and Mohamed said Rapid7 was careful to preserve resources supporting customers before and after a sale.
The traction signal is negative on growth. Revenue fell 1.5% in the second quarter of 2026, annual recurring revenue fell 2% to $824 million, and BankInfoSecurity reports that first-half 2026 sales fell 0.9%. Rapid7 guided third-quarter annual recurring revenue to about $812 million.
Rapid7 publishes starting prices for its individual Insight products on its pricing page. InsightVM starts at $1.62 per asset per month for 500 assets, InsightAppSec at $175 per app per month, and InsightCloudSec at $5,775 per month for up to 500 instances.
Its packages, Managed Threat Complete, Exposure Command and Incident Command, appear on the same page with links to learn more and no listed price. Rapid7 describes MDR pricing as asset-based on its MDR page.
Rapid7 now emphasizes margin. It expects its non-GAAP operating margin to reach 20% in the fourth quarter of 2026, up from 13.7% in the second quarter, while it guides revenue lower.
Rapid7 offers InsightVM, InsightAppSec and InsightCloudSec individually or together. Its MDR analysts investigate, contain and remediate threats as an accountable extension of the customer’s team.
Through the managed service, Rapid7 becomes part of the customer’s security operations. Rapid7 MDR ingests and normalizes the customer’s telemetry through an open extension library, and Rapid7 analysts manage vital security tools for the customer.
Rapid7’s own security posture is broadly attested. Its information security management system is ISO 27001 certified through a third-party audit, it undergoes an annual SOC 2 Type II audit, and its AI management system is ISO/IEC 42001 certified in the role of an AI provider.
Its government assessments go further than ordinary enterprise preparation. Rapid7 has completed an IRAP assessment at PROTECTED level and a BSI C5:2020 Type 2 examination, and InsightGovCloud has GovRAMP authorization. A replacement for a buyer that requires one of these would need its own assessment, which takes time but remains feasible for other vendors.
Rapid7 sells prevention, threat detection and managed response with unlimited incident response as one subscription. Rapid7 lists more than 500 integrations for Exposure Command across cloud, identity, ticketing and endpoint tools, and Rapid7 MDR ingests telemetry through an open extension library.
Rapid7 brings CrowdStrike remediation recommendations into Remediation Hub, synchronizes alerts with Microsoft Defender, and sells MDR for Microsoft inside Microsoft’s security ecosystem.
Rapid7 has new leadership running a restructuring. Wael Mohamed, whom BankInfoSecurity describes as a former Forescout chief executive, became chief executive on June 1, 2026, and Corey Thomas, chief executive for more than 13 years, became executive chairman.
Rapid7 cut 18% of staff in August 2023. In October 2024 BankInfoSecurity reported that JANA Partners had taken a 13% economic interest in Rapid7. The investor was evaluating buyer interest in the company. Rapid7 announced another staff cut of 12% in August 2026.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | About Rapid7 | official | 2026-10-12 |
| f2 | Rapid7 CEO transition press release, company description | official | 2026-10-12 |
| f3 | Rapid7 FY2025 Form 10-K (SEC EDGAR), IPO | regulatory | 2026-07-10 |
| f4 | Incident Command: AI Powered Next-Gen SIEM | official | 2026-07-28 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Rapid7 investor relations: second quarter 2026 financial results release (PDF) “Revenue: Total revenue of $210.9 million, a decrease of 1.5% year-over-year.” | official | 2026-10-12 |
| s25 | Rapid7 investor relations: fourth quarter and full-year 2025 financial results release (PDF) “Revenue: Total revenue of $860 million increased 2% year-over-year.” | official | 2026-10-12 |
| s2 | BankInfoSecurity: Rapid7 Lays Off 12% of Staff as New CEO Reshapes Cyber Firm “Rapid7 plans to lay off 12% of its employees just two months after naming a new CEO to better align resources with its core platform.” | press | 2026-10-12 |
| s3 | BankInfoSecurity: Jana Partners Increases Stake in Rapid7, Eyes Potential Sale “Activist investor Jana Partners has taken a 13% economic interest in Boston-based Rapid7 and is evaluating potential buyer interest in the vulnerability management vendor.” | press | 2026-10-12 |
| s27 | SiliconANGLE: Rapid7 beats estimates, raises profit outlook and cuts 12% of staff “For the quarter ended on June 30, Rapid7 reported adjusted earnings of 44 cents per share, down from 58 cents a year earlier, on revenue of $210.9 million, a decline of 1.5% year-over-year.” | press | 2026-10-12 |
| s6 | NVD: CVE-2025-6264, Velociraptor artifact permission flaw “This artifact did not enforce an additional required permission, allowing users with COLLECT_CLIENT permissions (normally given by the "Investigator" role) to collect it from endpoints and update the configuration.” | research | 2026-10-12 |
| s7 | Rapid7: About page “As a recognized leader in preemptive managed detection and response (MDR), Rapid7 unifies exposure and detection to transform the cybersecurity operations of more than 11,500 customers worldwide.” | official | 2026-10-12 |
| s8 | Rapid7: Command Platform page “Exploitation follows disclosure in days, ransomware has become sophisticated and industrialized, and identity, cloud, and edge systems are prime targets for attack.” | official | 2026-10-12 |
| s9 | Rapid7: MDR services page “Rapid7 analysts and advisors work as an accountable extension of your team – investigating, containing, remediating, and strategizing with clarity that strengthens resilience.” | official | 2026-10-12 |
| s10 | Rapid7: Trust compliance page “Rapid7 undergoes a SOC 2 Type II audit annually to ensure the effectiveness of controls relevant to security.” | official | 2026-10-12 |
| s11 | Rapid7 press release: GovRAMP authorization for InsightGovCloud “The authorization enables state, local, and educational organizations to leverage Rapid7’s vulnerability management, cloud security, and security automation solutions through a security framework specifically designed for government procurement and compliance requirements.” | official | 2026-10-12 |
| s12 | Rapid7 press release: Kenzo Security acquisition “announced it has acquired Kenzo Security, an agentic AI security platform built to scale autonomous security investigations.” | official | 2026-10-12 |
| s13 | Rapid7 press release: 2025 Gartner Magic Quadrant for Exposure Assessment Platforms “BOSTON —November 12, 2025 — Rapid7, Inc. (NASDAQ: RPD), a leader in threat detection and exposure management, today announced it has been positioned as a Leader in the 2025 Gartner® Magic Quadrant™ for Exposure Assessment Platforms (EAPs).” | official | 2026-10-12 |
| s14 | Rapid7 press release: Wael Mohamed appointed CEO “He is the founder of Global Forward Capital, a cybersecurity-focused investment firm, and previously served as CEO of Forescout, which he successfully led through two strategic acquisitions.” | official | 2026-10-12 |
| s15 | Rapid7: Product pricing page “Vulnerability risk management starts at $1.62/mo for 500 assets, per asset” | official | 2026-10-12 |
| s16 | Rapid7: Incident Command SIEM page “Trigger isolation, credential revocation, or kill processes directly from the platform.” | official | 2026-10-12 |
| s18 | Rapid7 press release: Rapid7 Intelligence launch “BOSTON, Oct. 2, 2026 – Today, Rapid7, Inc. (NASDAQ: RPD), a global leader in AI-powered managed cybersecurity operations, announced the launch of Rapid7 Intelligence, a unified engine designed to transform enterprise threat defenses from reactive monitoring to proactive prevention.” | official | 2026-10-12 |
| s19 | Rapid7 documentation: September 2026 release notes “Remediation Hub now surfaces remediation recommendations from CrowdStrike, giving you a more unified view of remediation activity across your environment.” | official | 2026-10-12 |
| s20 | Rapid7 press release: Cyber GRC general availability “BOSTON, July 28, 2026 — Rapid7, Inc. (NASDAQ: RPD), a global leader in AI-powered managed cybersecurity operations, today announced the general availability of Rapid7 Cyber GRC, expanding the Rapid7 Command Platform with native governance, risk, and compliance (GRC) capabilities.” | official | 2026-10-12 |
| s22 | Rapid7: Exposure Command page “500+ integrations across cloud, identity, ITSM, ticketing, EDR, CI/CD pipeline, and more to ingest telemetry, enrich context, and drive action.” | official | 2026-10-12 |
| s26 | Rapid7: Customers page “See why 11,000+ customers trust Rapid7 to secure their businesses” | official | 2026-10-12 |
| s30 | GitHub: rapid7/metasploit-framework repository “The Metasploit Framework is an open-source tool released under a BSD-style license.” | official | 2026-10-12 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Rapid7 investor relations: second quarter 2026 financial results release (PDF) “Revenue: Total revenue of $210.9 million, a decrease of 1.5% year-over-year.” | official | 2026-10-12 |
| s25 | Rapid7 investor relations: fourth quarter and full-year 2025 financial results release (PDF) “Revenue: Total revenue of $860 million increased 2% year-over-year.” | official | 2026-10-12 |
| s2 | BankInfoSecurity: Rapid7 Lays Off 12% of Staff as New CEO Reshapes Cyber Firm “Rapid7 plans to lay off 12% of its employees just two months after naming a new CEO to better align resources with its core platform.” | press | 2026-10-12 |
| s3 | BankInfoSecurity: Jana Partners Increases Stake in Rapid7, Eyes Potential Sale “Activist investor Jana Partners has taken a 13% economic interest in Boston-based Rapid7 and is evaluating potential buyer interest in the vulnerability management vendor.” | press | 2026-10-12 |
| s27 | SiliconANGLE: Rapid7 beats estimates, raises profit outlook and cuts 12% of staff “For the quarter ended on June 30, Rapid7 reported adjusted earnings of 44 cents per share, down from 58 cents a year earlier, on revenue of $210.9 million, a decline of 1.5% year-over-year.” | press | 2026-10-12 |
| s6 | NVD: CVE-2025-6264, Velociraptor artifact permission flaw “This artifact did not enforce an additional required permission, allowing users with COLLECT_CLIENT permissions (normally given by the "Investigator" role) to collect it from endpoints and update the configuration.” | research | 2026-10-12 |
| s7 | Rapid7: About page “As a recognized leader in preemptive managed detection and response (MDR), Rapid7 unifies exposure and detection to transform the cybersecurity operations of more than 11,500 customers worldwide.” | official | 2026-10-12 |
| s8 | Rapid7: Command Platform page “Exploitation follows disclosure in days, ransomware has become sophisticated and industrialized, and identity, cloud, and edge systems are prime targets for attack.” | official | 2026-10-12 |
| s9 | Rapid7: MDR services page “Rapid7 analysts and advisors work as an accountable extension of your team – investigating, containing, remediating, and strategizing with clarity that strengthens resilience.” | official | 2026-10-12 |
| s10 | Rapid7: Trust compliance page “Rapid7 undergoes a SOC 2 Type II audit annually to ensure the effectiveness of controls relevant to security.” | official | 2026-10-12 |
| s11 | Rapid7 press release: GovRAMP authorization for InsightGovCloud “The authorization enables state, local, and educational organizations to leverage Rapid7’s vulnerability management, cloud security, and security automation solutions through a security framework specifically designed for government procurement and compliance requirements.” | official | 2026-10-12 |
| s12 | Rapid7 press release: Kenzo Security acquisition “announced it has acquired Kenzo Security, an agentic AI security platform built to scale autonomous security investigations.” | official | 2026-10-12 |
| s13 | Rapid7 press release: 2025 Gartner Magic Quadrant for Exposure Assessment Platforms “BOSTON —November 12, 2025 — Rapid7, Inc. (NASDAQ: RPD), a leader in threat detection and exposure management, today announced it has been positioned as a Leader in the 2025 Gartner® Magic Quadrant™ for Exposure Assessment Platforms (EAPs).” | official | 2026-10-12 |
| s14 | Rapid7 press release: Wael Mohamed appointed CEO “He is the founder of Global Forward Capital, a cybersecurity-focused investment firm, and previously served as CEO of Forescout, which he successfully led through two strategic acquisitions.” | official | 2026-10-12 |
| s15 | Rapid7: Product pricing page “Vulnerability risk management starts at $1.62/mo for 500 assets, per asset” | official | 2026-10-12 |
| s16 | Rapid7: Incident Command SIEM page “Trigger isolation, credential revocation, or kill processes directly from the platform.” | official | 2026-10-12 |
| s18 | Rapid7 press release: Rapid7 Intelligence launch “BOSTON, Oct. 2, 2026 – Today, Rapid7, Inc. (NASDAQ: RPD), a global leader in AI-powered managed cybersecurity operations, announced the launch of Rapid7 Intelligence, a unified engine designed to transform enterprise threat defenses from reactive monitoring to proactive prevention.” | official | 2026-10-12 |
| s19 | Rapid7 documentation: September 2026 release notes “Remediation Hub now surfaces remediation recommendations from CrowdStrike, giving you a more unified view of remediation activity across your environment.” | official | 2026-10-12 |
| s20 | Rapid7 press release: Cyber GRC general availability “BOSTON, July 28, 2026 — Rapid7, Inc. (NASDAQ: RPD), a global leader in AI-powered managed cybersecurity operations, today announced the general availability of Rapid7 Cyber GRC, expanding the Rapid7 Command Platform with native governance, risk, and compliance (GRC) capabilities.” | official | 2026-10-12 |
| s22 | Rapid7: Exposure Command page “500+ integrations across cloud, identity, ITSM, ticketing, EDR, CI/CD pipeline, and more to ingest telemetry, enrich context, and drive action.” | official | 2026-10-12 |
| s26 | Rapid7: Customers page “See why 11,000+ customers trust Rapid7 to secure their businesses” | official | 2026-10-12 |
| s30 | GitHub: rapid7/metasploit-framework repository “The Metasploit Framework is an open-source tool released under a BSD-style license.” | official | 2026-10-12 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.